Serve as SME for cryptographic governance and PKI lifecycle management.
Define and maintain enterprise crypto and PKI governance frameworks, policies, and standards.
Oversee key management processes including generation, rotation, archival, and destruction.
Collaborate with engineering teams to ensure cryptographic implementations align with governance requirements.
Lead efforts to assess and mitigate risks associated with cryptographic systems and PKI.
Interface with internal audit, risk, and compliance teams to support assessments and regulatory reviews.
Monitor and report on crypto and PKI compliance metrics and control effectiveness.
Evaluate vendor solutions for crypto and PKI compliance and integration.
Stay current with evolving cryptographic standards, including Post-Quantum Cryptography.
Provide guidance and mentorship to technical teams on crypto governance best practices.

8+ Years experience
Strong understanding of cryptographic principles
PKI architecture
key lifecycle management.
Experience with governance frameworks and regulatory standards (e.g., NIST, ISO, PCI-DSS).
Familiarity with TLS, SSH, and other secure communication protocols.
Knowledge of Post-Quantum Cryptography and its governance implications.
Experience with cloud-based key management and protection strategies.
Excellent communication skills for engaging technical and non-technical stakeholders.
Proven ability to manage risk and compliance deliverables in a complex environment.
Experience supporting audit exams and risk assessments.
Ability to work collaboratively across engineering, compliance, and vendor teams.
Agile delivery experience preferred.
Coding knowledge and understanding of SDLC process, using API’s, developing small scale solutions with different databases.

Software Engineer III

Key skills